This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/97DX5I3DXmozptw-sWqlR4foXXU.roa File: 97DX5I3DXmozptw-sWqlR4foXXU.roa (raw, json) Hash identifier: 77zsOfhaIU3CSg4BUbhV2AIiKXyzFLkrgnOWV3Vu7Tg= Subject key identifier: F7:B0:D7:E4:8D:C3:5E:6A:33:A6:DC:3E:B1:6A:A5:47:87:E8:5D:75 Certificate issuer: /CN=3109a8d70fa4478935b05c0621f6889552405daf Certificate serial: 019B78355F3B47D95A479695CE996396DF20 Authority key identifier: 31:09:A8:D7:0F:A4:47:89:35:B0:5C:06:21:F6:88:95:52:40:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/97DX5I3DXmozptw-sWqlR4foXXU.roa Signing time: Thu 01 Jan 2026 06:18:42 +0000 ROA not before: Thu 01 Jan 2026 06:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206869 IP address blocks: 195.138.56.0/24 maxlen: 24 2a06:d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:5f:3b:47:d9:5a:47:96:95:ce:99:63:96:df:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3109a8d70fa4478935b05c0621f6889552405daf Validity Not Before: Jan 1 06:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7b0d7e48dc35e6a33a6dc3eb16aa54787e85d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ab:30:4f:43:5e:94:8a:80:15:69:0f:de:46: 02:8a:35:40:f9:e5:29:90:8c:72:16:36:e5:4c:15: 87:59:08:52:27:7b:2c:c7:0d:12:02:2d:13:8d:4c: 68:ee:d6:04:a8:a3:b6:ca:9d:f5:2f:29:9c:55:38: d2:a8:2f:eb:04:bc:cd:d2:dc:3f:cd:bb:b5:94:b1: bc:cc:6b:b1:1b:ab:56:0a:17:82:71:b5:e5:72:43: de:d0:0f:51:91:d0:63:b9:91:71:1d:3c:69:96:8a: c3:d7:da:43:db:69:46:51:b5:ad:1b:8d:6e:54:9e: f9:5f:91:cc:11:a1:12:41:62:e8:a8:cf:d1:05:b2: aa:07:e7:32:42:75:d6:ec:d7:bf:48:c5:72:90:61: 35:be:2a:81:2d:7e:54:67:11:9b:d3:79:97:7d:7e: db:98:53:06:f6:cd:ab:9f:9d:c6:a2:c6:6c:16:25: 03:55:38:64:78:c9:46:91:64:d1:24:36:f5:45:7b: 50:f6:1f:69:ba:01:df:f4:94:d0:1d:03:18:a7:d5: 22:b3:01:6f:fd:c6:01:30:ca:60:14:ba:ee:79:68: 6b:70:a8:8f:94:f1:36:65:15:63:ad:ec:2e:64:e3: 61:7e:d4:6f:c8:28:c3:a3:13:7d:2f:d6:01:06:c6: f4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B0:D7:E4:8D:C3:5E:6A:33:A6:DC:3E:B1:6A:A5:47:87:E8:5D:75 X509v3 Authority Key Identifier: keyid:31:09:A8:D7:0F:A4:47:89:35:B0:5C:06:21:F6:88:95:52:40:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/97DX5I3DXmozptw-sWqlR4foXXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.138.56.0/24 IPv6: 2a06:d40::/32 Signature Algorithm: sha256WithRSAEncryption 70:06:7c:18:10:b8:b0:b9:74:bd:1d:3d:06:20:ac:93:6f:e0: a5:ac:32:de:90:98:be:e0:83:89:5a:24:b9:69:48:1b:3c:a7: 03:09:5c:37:c0:ad:6a:3a:62:72:56:29:ae:68:ae:75:48:1a: ba:11:4a:de:fc:ac:35:74:0a:ee:cc:62:34:be:29:23:10:74: 6d:d6:a3:59:e1:be:ca:79:39:db:0a:25:ee:d5:e3:fd:40:4c: 6d:df:ab:b9:cb:9c:66:5c:ca:79:3e:22:4c:fd:fc:46:08:ab: 80:c5:08:46:46:d4:d3:9f:b8:fd:74:8b:43:59:42:f5:1c:0f: 13:ff:68:19:29:42:e8:5e:c2:ea:43:9a:26:56:95:64:89:61: 14:0b:df:07:28:8e:ad:e6:8e:9a:d9:7f:5e:be:bb:ab:8e:d6: e9:61:94:1d:ec:8a:71:a4:d5:5a:ac:17:2f:17:41:02:82:b8: a9:f8:1f:1b:e6:25:bb:26:46:52:4f:0e:37:4d:64:62:c4:eb: 48:94:42:e8:c9:a6:0b:4d:b4:c7:6b:92:a0:20:f0:4e:2a:97: fd:ae:02:f6:ff:42:4f:71:bb:64:91:87:a1:c5:42:2d:67:5b: 8c:c3:65:8b:bf:28:ca:5a:06:1a:4f:85:ff:4f:c5:17:e2:dc: bb:b2:12:23 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NV87R9laR5aVzpljlt8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMDlhOGQ3MGZhNDQ3ODkzNWIwNWMwNjIxZjY4ODk1NTI0 MDVkYWYwHhcNMjYwMTAxMDYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2IwZDdlNDhkYzM1ZTZhMzNhNmRjM2ViMTZhYTU0Nzg3ZTg1ZDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaswT0NelIqAFWkP3kYCijVA+eUp kIxyFjblTBWHWQhSJ3ssxw0SAi0TjUxo7tYEqKO2yp31LymcVTjSqC/rBLzN0tw/ zbu1lLG8zGuxG6tWCheCcbXlckPe0A9RkdBjuZFxHTxplorD19pD22lGUbWtG41u VJ75X5HMEaESQWLoqM/RBbKqB+cyQnXW7Ne/SMVykGE1viqBLX5UZxGb03mXfX7b mFMG9s2rn53GosZsFiUDVThkeMlGkWTRJDb1RXtQ9h9pugHf9JTQHQMYp9UiswFv /cYBMMpgFLrueWhrcKiPlPE2ZRVjrewuZONhftRvyCjDoxN9L9YBBsb0/wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPew1+SNw15qM6bcPrFqpUeH6F11MB8GA1UdIwQY MBaAFDEJqNcPpEeJNbBcBiH2iJVSQF2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVFtbzF3LWtSNGsxc0Z3R0lmYUlsVkpBWGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xMDZiM2YtNTVhMy00NTU4LTgwMTMt NGJlZTMyNzRjNjk4LzEvOTdEWDVJM0RYbW96cHR3LXNXcWxSNGZvWFhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8xMDZiM2YtNTVhMy00NTU4LTgwMTMtNGJlZTMyNzRjNjk4 LzEvTVFtbzF3LWtSNGsxc0Z3R0lmYUlsVkpBWGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw4o4MA0E AgACMAcDBQAqBg1AMA0GCSqGSIb3DQEBCwUAA4IBAQBwBnwYELiwuXS9HT0GIKyT b+ClrDLekJi+4IOJWiS5aUgbPKcDCVw3wK1qOmJyVimuaK51SBq6EUre/Kw1dAru zGI0vikjEHRt1qNZ4b7KeTnbCiXu1eP9QExt36u5y5xmXMp5PiJM/fxGCKuAxQhG RtTTn7j9dItDWUL1HA8T/2gZKULoXsLqQ5omVpVkiWEUC98HKI6t5o6a2X9evrur jtbpYZQd7IpxpNVarBcvF0ECgrip+B8b5iW7JkZSTw43TWRixOtIlELoyaYLTbTH a5KgIPBOKpf9rgL2/0JPcbtkkYehxUItZ1uMw2WLvyjKWgYaT4X/T8UX4ty7shIj -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:19 2026 by rpki-client